SHEIN
Staff Security Engineer
Los Angeles · Staff+
Sponsorship not specified$130k-$169kDetected 12 hours ago
AWSGCPAzureKubernetesCI/CDCybersecurityDetection EngineeringIncident Response
Stay score
odds of building a lasting career here
57Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds (Level III)83
Fits your clock70
Sponsors, but it's cap-subject — you still face the weighted lottery (~45% per draw at Level III). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
5 transfer filings in the last year, covering 5 workers. Median labor-condition decision: 8 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- We operate at meaningful scale: customers in 150+ countries, footprint across multi-cloud providers, and engineering teams shipping continuously.
- We've already made significant investments in our security foundations and are now focused on the next stage of maturity for Cloud container and workload security.
- In this role, your primary focus will be cloud security posture, container and Kubernetes security: runtime threat detection, admission control, image integrity, secrets management, and the policy-as-code frameworks needed to run these systems well at scale.
Responsibilities
- You'll work closely with infrastructure, platform, and security teams across regions to design and implement controls that are effective, durable, and usable in production.
- Deploy and manage containerized security tooling - NTA sensors, NDR, and runtime threat detection - across global data centers.
- Design and implement Kubernetes hardening: RBAC, network policies, pod security standards, and secrets management.
- Partner with engineering and infrastructure teams early in the design process to help implement secure, practical container platform architectures.
- Utilize AI to build automation and operational tooling to improve reliability, visibility, and container lifecycle security.
- Troubleshoot runtime security, container and K8s security production issues, perform root cause analysis, and drive durable remediation.
- Develop incident response runbooks for container/K8s-specific attack patterns.
- Strong practical experience securing production K8s clusters (EKS, AKS, GKE, or self-managed), including: pod security standards, network policy design, RBAC architecture, admission control, and secrets management.
Requirements
- Familiarity with open-source cloud-native security projects (Falco, OPA, Trivy, kube-bench, Cilium, or similar) - we value engineers who understand how tools work under the hood, not just how to configure them.
Nice to have
- Define and improve standards, guardrails, and reference patterns for CSPM, container image security, runtime integrity enforcement, and admission control.
- NTA sensors, NDR, and runtime threat detection - across global data centers.
- Integrate security telemetry from OT network devices and containerized workloads into centralized SOC platforms.
- 5+ years of security engineering experience, with 3+ years of meaningful hands-on work in cloud security, container/Kubernetes security or closely related cloud-native security domains.
- Strong practical experience securing production
Skills
- Tune and operate policy-as-code frameworks (Kyverno, OPA/Rego) to enforce security baselines across K8s clusters at scale.
- Built or operated container runtime security tooling (Falco, Sysdig, Aqua, Prisma Cloud Compute, or equivalent) in production environments.
Compensation
- $130k-$169k
Company info
- This is a greenfield engineering role - you'll be the cloud security engineer on the global team.
This listing is sourced directly from SHEIN's careers page and normalized into a canonical job model.